Legal Document
We are committed to protecting your privacy and handling your personal data transparently, responsibly, and securely. This Policy explains what data we collect, why we collect it, and what rights you have.
Webgency Invitations OÜ is a digital invitation design company registered in the Republic of Estonia (registration code 17475003). Our registered address is A. Puškini tn 25-25, Narva, Ida-Viru maakond, 20303, Estonia.
For the purposes of the EU General Data Protection Regulation (GDPR) and applicable Estonian data protection law, Webgency Invitations OÜ is the Data Controller for the personal data we collect and process.
Our designated contact for data protection matters is reachable at webgency.team@gmail.com.
a. Identity & Contact Data
b. Event & Order Data
c. Payment Data
Note: We do not store, access, or process your payment card details. All transactions are handled securely by Stripe. See stripe.com/privacy for their privacy policy.
d. Technical & Usage Data
This data is collected automatically through our website platform (Tilda) and Google Analytics.
e. Communications Data
We collect personal data through the following channels:
We only collect data that is necessary to deliver our Services or that you voluntarily provide to us.
We process your personal data under the following legal bases as defined by GDPR Article 6:
| Processing Activity | Legal Basis |
|---|---|
| Processing your Order and delivering your Design | Performance of a contract (Art. 6(1)(b)) |
| Issuing invoices and maintaining financial records | Legal obligation (Art. 6(1)(c)) |
| Sending marketing communications and newsletters | Consent (Art. 6(1)(a)) |
| Analytics and Website improvement | Legitimate interests (Art. 6(1)(f)) |
| Responding to enquiries and customer support | Legitimate interests (Art. 6(1)(f)) |
| Portfolio display of completed Designs | Consent (Art. 6(1)(a)) |
We use your personal data for the following purposes:
We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
We do not sell, rent, or trade your personal data. Access is limited to the following:
Internal Team
Members of our design and operational team who need access to deliver your Order. All team members are required to handle your data confidentially and only for the purposes described in this Policy.
Third-Party Service Providers
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA / EU (GDPR compliant) |
| Google (Gmail, Forms, Drive) | Communication, data collection, file storage | USA / EU (SCCs in place) |
| Tilda | Website hosting and forms | EU servers |
| Google Analytics | Website analytics | USA / EU (SCCs in place) |
| Meta (Instagram / WhatsApp) | Client communications | USA / EU |
| TikTok | Client communications | International |
Legal Authorities
We may disclose your data to law enforcement or regulatory authorities if required by applicable law, court order, or to protect our legal rights.
As we use internationally operating service providers (such as Google and Stripe), your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States.
Where such transfers occur, we ensure appropriate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses (SCCs) approved by the European Commission, or transfers to providers certified under applicable EU-US data transfer frameworks.
We retain your personal data only for as long as necessary:
| Data Category | Retention Period |
|---|---|
| Order and design files | Up to 2 years after delivery, unless earlier deletion is requested |
| Financial and invoice records | 7 years (as required by Estonian accounting law) |
| Marketing consent records | Until you withdraw consent or unsubscribe |
| Technical / analytics data | Aggregated; up to 26 months (Google Analytics default) |
| Communication records | Up to 2 years after last contact |
Upon expiry of the relevant retention period, your data will be securely deleted or anonymised.
Our Website uses cookies and similar tracking technologies to analyse usage and improve your experience.
Types of Cookies We Use
We do not use advertising or retargeting cookies. You can manage or disable cookies at any time through your browser settings. Disabling certain cookies may affect Website functionality.
We will only send you marketing emails, newsletters, or promotional communications if you have explicitly consented to receiving them.
You may withdraw your consent and unsubscribe at any time by:
Withdrawing marketing consent does not affect our right to send you transactional communications related to an active Order.
As a data subject under the GDPR, you have the following rights. Exercise any of them by contacting us at webgency.team@gmail.com. We will respond within 30 days.
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data (the "right to be forgotten"), subject to legal retention obligations.
Request that we limit how we use your data in certain circumstances.
Request your data in a structured, machine-readable format.
Object to processing based on legitimate interests, including direct marketing.
Withdraw consent at any time without affecting past lawful processing.
File a complaint with the data protection supervisory authority in your country of residence.
Our Services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 16. If we become aware that we have inadvertently collected such data without verified parental consent, we will take immediate steps to delete it. Please contact us at webgency.team@gmail.com if you believe this has occurred.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The updated version will always be available on this page with a revised effective date. For significant changes, we will make reasonable efforts to notify you directly.
If you have any questions, requests, or concerns about this Privacy Policy or your personal data, please contact us: